Bugtraq mailing list archives

Re: msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh


From: "Gao Rui" <gaorui () infosec pku edu cn>
Date: Wed, 12 May 2004 09:01:20 +0800

I tried your example, but nothing happens
My system information:
IE version: 6.0.2800
Module name: msxml3.dll


Best Regards,
Gao Rui
gaorui () infosec pku edu cn
Network & Information Security Lab, Dept. of Computer Science
Peking University, Beijing, 100871, China


----- Original Message ----- 
From: "Rafel Ivgi, The-Insider" <theinsider () 012 net il>
To: "bugtraq" <bugtraq () securityfocus com>
Sent: Tuesday, May 11, 2004 2:27 AM
Subject: msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon
Refresh


msxml3.dll crashes after refreshing a page which contains & inside a
link/value
For Example : <Ref href = "&"/>
This is due to a parsing error in msxml3.dll.

Version Details:
---------------------
I.E Version: 6.0.2600.0
ModVer: 8.10.8308.0
Module name: msxml3.dll
Offset: 000b8c10

Stack Dump:
-----------------
EAX=01CEE800
EDI=01D02580
EBX=00000000
EBP=02C3F3E4
ECX=00000000
ESP=02C3FC74
EDX=02D91364
EIP=02E18C10
ESI=00000000
DS:00000004     GS:0000     ES:0023     SS:0023     CS:001B

Live Example:
http://theinsider.deep-ice.com/xmlcrash.xml
AND REFRESH...




Current thread: